BIND 10 #1809: support NSEC for NXDOMAIN in in-memory

BIND 10 Development do-not-reply at isc.org
Sun Mar 18 08:43:21 UTC 2012


#1809: support NSEC for NXDOMAIN in in-memory
-------------------------------------+-------------------------------------
            Reporter:  jinmei        |                        Owner:
                Type:  task          |                       Status:  new
            Priority:  medium        |                    Milestone:  New
           Component:  data source   |  Tasks
           Sensitive:  0             |                     Keywords:
         Sub-Project:  DNS           |              Defect Severity:  N/A
Estimated Difficulty:  0             |  Feature Depending on Ticket:  in-
         Total Hours:  0             |  memory NSEC
                                     |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
 We'll update this case of InMemoryZoneFinder::find().

 {{{#!c++
                 // fall through
             case DomainTree::NOTFOUND:
                 LOG_DEBUG(logger, DBG_TRACE_DATA, DATASRC_MEM_NOT_FOUND).
                     arg(name);
                 return (createFindResult(NXDOMAIN, ConstRBNodeRRsetPtr(),
                                          false));
 }}}

 It uses getClosestNSEC() to get the NSEC for the previous name of the
 non-existent name and includes it in the answer.  Note that it
 shouldn't do this extra work unless DNSSEC is required and the zone is
 known to be NSEC-signed (because the cost is not zero).

 It dpends on #1802, #1803, #1804, dnd #1805.

-- 
Ticket URL: <http://bind10.isc.org/ticket/1809>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list